7973 matches found
PT-2012-5402
Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.1.12 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger a Smarty exception in the SmartyException class. Recommendations For versions prior to...
PT-2012-5845
Name of the Vulnerable Software and Affected Versions Drupal stickynote module versions prior to 7.x-1.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML. Recommendations For versions...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 "error message displays" or 2 "in source HTML on...
Code injection
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...
CVE-2012-0956
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...
PT-2012-2972
Name of the Vulnerable Software and Affected Versions ubiquity-slideshow-ubuntu versions before 58.2 Description The issue allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed during...
CVE-2012-0956: Undefined Security Weakness
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...
CVE-2012-2886
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS UXSS."...
CVE-2012-1188
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 type or 2 querystring parameters to private/en/error or 3 name parameter to private/en/locale/index...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 type or 2 querystring parameters to private/en/error or 3 name parameter to private/en/locale/index...
CVE-2012-1117
Cross-site scripting XSS vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5164
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...
CVE-2012-1117: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-3089
Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.0 through 2.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 2.5.0 and 2.5.1, update to a version that...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via the 1 title parameter in faq.admin.inc or 2 detailedquestion parameter in faq.module...
CVE-2012-1293
Multiple cross-site scripting XSS vulnerabilities in fup in Frams' Fast File EXchange FEX, aka fex before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the 1 to or 2 from parameters...
CVE-2012-5105
Multiple cross-site scripting XSS vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to 1 main.php or 2 index.php; or 3 nsextt parameter to index.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to 1 main.php or 2 index.php; or 3 nsextt parameter to index.php...